Vestige runs on your own machine — the client starts it, so there is no endpoint to ping. 235 installs a week from npm. Last commit 6 Nov 2026.
Causal Proof Engine for AI agents: signed log, zero vectors, failures traced to their cause.
What the code does
We read the source, 1 d ago · rules 995398eba69f
A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.
r = subprocess.run(["git", "-C", e.get("gdir") or ecwd or cwd or ".", "symbolic-ref", "--short",
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
const candidate = path.join(base, 'bin', name);
const result = spawnSync(process.execPath, [installerPath], {
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
"/dev/tcp, /dev/udp, nc -e and DNS-tunneling tools are raw outbound command channels, not tooling."),
attempt: 'rm -rf ~',
env=dict(os.environ, GIT_OPTIONAL_LOCKS="0", GIT_TERMINAL_PROMPT="0"))
OP_DESTRUCTIVE_ERE='(^|[^A-Za-z0-9_])rm[[:space:]]+-[a-zA-Z]*[rR]|(^|[^A-Za-z0-9_])push[[:space:]].*--force|DROP[[:space:]]+TABLE|vestige\.db|fly[[:space:]]+deploy|mkfs|(^|[^A-Za-z0-9_])dd[[:space:]]+if=|(^|[;|&[:space:]])(>>|tee[[:space:]])[^|;&]*/\.(zshrc|zprofile|zshenv|zlogin…
hits.append(("OP-011", "crontab -r deletes every scheduled job",
self.process = subprocess.Popen(
for (const drop of rain) {
const dy = drop.y + row;
env = dict(os.environ, OPERATOR_AGENT_SESSION="1")
PASTE_TUNNEL_RE = re.compile(r"webhook\.site|requestbin|pipedream|paste\.rs|pastebin|hastebin|termbin|transfer\.sh|file\.io|0x0\.st|tmpfiles\.org|ngrok|localtunnel|serveo|bore\.pub|trycloudflare|pasty\.", re.I)
r"docker\s+run\s+[^|;&\n]*(--privileged|--pid=host|--network=host|-v\s+/:/|-v\s+/var/run/docker\.sock)"
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
A tool parameter here reaches a dangerous call
That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add vestige -- npx -y vestige-mcp-server{
"mcpServers": {
"vestige": {
"command": "npx",
"args": [
"-y",
"vestige-mcp-server"
]
}
}
}[mcp_servers.vestige]
command = "npx"
args = ["-y", "vestige-mcp-server"]{
"mcpServers": {
"vestige": {
"command": "npx",
"args": [
"-y",
"vestige-mcp-server"
]
}
}
}{
"servers": {
"vestige": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"vestige-mcp-server"
]
}
}
}Alternatives to Vestige
same job, measured the same wayFederated local-first search across transcripts, files, KG, vectors and the web for AI agents.
Persistent memory for AI coding agents. Local-first SQLite + vector search. 17 MCP tools.
Persistent context for AI agents built fromlearned vectors with certainty scores.
100% In-Process Bare-Metal Hybrid Memory Engine & MCP Server for LLMs (SQLite + Int8 Vectors).
Local vector and raster editing engine for agents: layered documents, saved sessions and exports.
Self-hosted web search for AI agents — zero API keys, embedding rerank, multi engine parallel search
Calibrated probabilistic foresight for AI agents, powered by live prediction-market signal.
Semantic code search for AI agents — hybrid BM25+vector, call-graph, 20+ languages.
Vestige — questions
Answers built from our own checks of this server.